Gerrit
Gerrit is installed on formey in the prefix /var/lib/gerrit2.
It is a Java daemon which listens for HTTP connections (port 8080) and SSH connections (port 29418). Apache on formey proxies the relevant URLs on port 80 and 443 through to Gerrit. The SSH port provides a restricted shell for Git checkouts.
It uses the misc DB server (db9/db10), database name "reviewdb", for most storage.
It uses the LDAP instance shared with subversion and labs, possibly on virt0.wikimedia.org, for authentication. Accounts under ou=people,dc=wikimedia,dc=org and groups under ou=groups,dc=wikimedia,dc=org are exposed to Gerrit.
Gerrit shells out to GitWeb, a Perl application which is installed using the stock package.
Giving users Labs access, if they already have an SVN account
Collect the following information from the user:
- Preferred wiki username
- Preferred email address
- Their svn account name
On formey, run the following command:
add-labs-user --wikiname="<wikiusername>" --mail="<email address>" <svnusername>
Then go to Special:NovaProject and add the user, by wiki username, to the bastion project.
Then the user must do the following:
- Go to the password reset form at labs console
- Use the temporary password to set a password
- Log into gerrit
- Add their SSH key
If they are an ops team member, they should also be added to the ops group:
modify-ldap-group --addmembers=<svnusername> ops
If they are WMF staff, they should also be added to the wmf group:
modify-ldap-group --addmembers=<svnusername> wmf
Using gerrit
This is documented on labs console.
